Tony Jones 451830a94b apparmor: Fix network performance issue in aa_label_sk_perm ... [ Upstream commit 5f997580e8 ] The netperf benchmark shows a 5.73% reduction in throughput for small (64 byte) transfers by unconfined tasks. DEFINE_AUDIT_SK() in aa_label_sk_perm() should not be performed unconditionally, rather only when the label is confined. netperf-tcp 56974a6fc^ 56974a6fc Min 64 563.48 ( 0.00%) 531.17 ( -5.73%) Min 128 1056.92 ( 0.00%) 999.44 ( -5.44%) Min 256 1945.95 ( 0.00%) 1867.97 ( -4.01%) Min 1024 6761.40 ( 0.00%) 6364.23 ( -5.87%) Min 2048 11110.53 ( 0.00%) 10606.20 ( -4.54%) Min 3312 13692.67 ( 0.00%) 13158.41 ( -3.90%) Min 4096 14926.29 ( 0.00%) 14457.46 ( -3.14%) Min 8192 18399.34 ( 0.00%) 18091.65 ( -1.67%) Min 16384 21384.13 ( 0.00%) 21158.05 ( -1.06%) Hmean 64 564.96 ( 0.00%) 534.38 ( -5.41%) Hmean 128 1064.42 ( 0.00%) 1010.12 ( -5.10%) Hmean 256 1965.85 ( 0.00%) 1879.16 ( -4.41%) Hmean 1024 6839.77 ( 0.00%) 6478.70 ( -5.28%) Hmean 2048 11154.80 ( 0.00%) 10671.13 ( -4.34%) Hmean 3312 13838.12 ( 0.00%) 13249.01 ( -4.26%) Hmean 4096 15009.99 ( 0.00%) 14561.36 ( -2.99%) Hmean 8192 18975.57 ( 0.00%) 18326.54 ( -3.42%) Hmean 16384 21440.44 ( 0.00%) 21324.59 ( -0.54%) Stddev 64 1.24 ( 0.00%) 2.85 (-130.64%) Stddev 128 4.51 ( 0.00%) 6.53 ( -44.84%) Stddev 256 11.67 ( 0.00%) 8.50 ( 27.16%) Stddev 1024 48.33 ( 0.00%) 75.07 ( -55.34%) Stddev 2048 54.82 ( 0.00%) 65.16 ( -18.86%) Stddev 3312 153.57 ( 0.00%) 56.29 ( 63.35%) Stddev 4096 100.25 ( 0.00%) 88.50 ( 11.72%) Stddev 8192 358.13 ( 0.00%) 169.99 ( 52.54%) Stddev 16384 43.99 ( 0.00%) 141.82 (-222.39%) Signed-off-by: Tony Jones <tonyj@suse.de> Fixes: 56974a6fcf ("apparmor: add base infastructure for socket mediation") Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-01-27 14:49:54 +01:00
..
include	LSM: generalize flag passing to security_capable	2020-01-23 08:21:29 +01:00
.gitignore	apparmor: add base infastructure for socket mediation	2018-03-13 17:25:48 -07:00
apparmorfs.c	apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock	2020-01-09 10:19:02 +01:00
audit.c	apparmor: Fix memory leak of rule on error exit path	2018-06-07 01:50:48 -07:00
capability.c	LSM: generalize flag passing to security_capable	2020-01-23 08:21:29 +01:00
crypto.c
domain.c	apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock	2020-01-09 10:19:02 +01:00
file.c	apparmor: Check buffer bounds when mapping permissions mask	2018-07-19 16:24:43 -07:00
ipc.c	LSM: generalize flag passing to security_capable	2020-01-23 08:21:29 +01:00
Kconfig
label.c	apparmor: fix unsigned len comparison with less than zero	2020-01-04 19:13:08 +01:00
lib.c	apparmor: Fix uninitialized value in aa_split_fqname	2018-11-27 16:13:00 +01:00
lsm.c	LSM: generalize flag passing to security_capable	2020-01-23 08:21:29 +01:00
Makefile	apparmor: add base infastructure for socket mediation	2018-03-13 17:25:48 -07:00
match.c	apparmor: fix typo "traverse"	2018-05-03 00:50:12 -07:00
mount.c	apparmor: fix typo "independent"	2018-05-03 00:50:30 -07:00
net.c	apparmor: Fix network performance issue in aa_label_sk_perm	2020-01-27 14:49:54 +01:00
nulldfa.in	apparmor: cleanup add proper line wrapping to nulldfa.in	2018-02-09 11:30:01 -08:00
path.c
policy_ns.c	apparmor: fix an error code in __aa_create_ns()	2018-08-21 16:24:56 -07:00
policy_unpack.c	apparmor: reset pos on failure to unpack for various functions	2019-09-16 08:22:16 +02:00
policy.c	apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock	2020-01-09 10:19:02 +01:00
procattr.c	apparmor: move context.h to cred.h	2018-02-09 11:30:01 -08:00
resource.c	LSM: generalize flag passing to security_capable	2020-01-23 08:21:29 +01:00
secid.c	apparmor: fix bad debug check in apparmor_secid_to_secctx()	2018-09-03 11:15:29 -07:00
stacksplitdfa.in	apparmor: use the dfa to do label parse string splitting	2018-02-09 11:30:01 -08:00
task.c	apparmor: update domain transitions that are subsets of confinement at nnp	2018-02-09 11:30:01 -08:00